By SDCN Staff
A Russian man and web developer who was allegedly involved in a transnational cyber‑fraud conspiracy responsible for large‑scale bank account takeover activity, was arraigned Friday in the Northern District of Georgia after being extradited from the Republic of Georgia.
Sergei Anatolyevich Filimonov, 36 was indicted by a federal grand jury on Nov. 4, 2025, for charges relating to a credential‑harvesting and bank‑fraud operation that targeted victims across the United States.
According to court documents, Filimonov and his co‑conspirators executed a sophisticated scheme involving spoofed domains that mimicked the websites of federally insured financial institutions. The conspirators purchased sponsored search‑engine links to divert unsuspecting banking customers to fraudulent login pages, where victims entered their credentials. The conspirators used the stolen credentials to access bank accounts, review account balances, and initiate unauthorized wire transfers to steal bank account funds.
The indictment also alleges that Filimonov developed and maintained online infrastructure supporting the operation, including interactive databases storing more than 5,000 stolen login credentials and software designed to capture and transmit sensitive authentication data. Filimonov and his conspirators allegedly attempted to obtain millions of dollars from victim accounts, including accounts held by companies located in the Northern District of Georgia.
In connection with the charged scheme, the Department of Justice previously seized the domain, web3adspanels.org, which operated as a backend server storing stolen credentials harvested from fraudulent banking websites. The seized backend database contained thousands of compromised credentials, including those belonging to victims located in the Northern District of Georgia.
Filimonov is charged with conspiracy to commit bank and wire fraud; access device fraud conspiracy; multiple counts of bank and wire fraud; possession of unauthorized access devices; possession of device‑making equipment; effecting transactions with unauthorized access devices; and aggravated identity theft.
If convicted, he faces a minimum penalty of two years in prison and a maximum penalty of 175 years in prison.
The FBI Atlanta Field Office is investigating the case.
